CVE-2024-20109

CVE-2024-20109 affects the component identified as ccu (referenced across Red Hat/NVD entries and related advisories). The root cause is a missing bounds check that allows an out-of-bounds write, resulting in local escalation of privileges with System-level execution privileges required. No user ...

CVE-2024-20108

In atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09082988; Issue ID: MSV-1774...

CVE-2024-20106

In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08960505; Issue ID: MSV-1590...

CVE-2024-20106

CVE-2024-20106 affects MediaTek’s m4u component. The issue is a missing bounds check causing a possible out-of-bounds write, enabling local privilege escalation with System-level privileges and no user interaction required. A patch is available: ALPS08960505 (MSV-1590). Other connected records co...

PT-2024-18603 · Vdec · Vdec

Name of the Vulnerable Software and Affected Versions: vdec affected versions not specified Description: The issue is related to an out of bounds read in vdec due to improper structure design, which could lead to local information disclosure. System execution privileges are needed for exploitatio...

PT-2024-18611 · Vdec · Vdec

Name of the Vulnerable Software and Affected Versions: vdec affected versions not specified Description: The issue is related to a possible out of bounds read in vdec due to improper structure design, which could lead to local information disclosure. System execution privileges are needed for...

PT-2024-18608 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: KeyInstall affected versions not specified Description: The issue is related to a possible out of bounds write in KeyInstall due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges...

CVE-2024-47028

In ffuflashpack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47028

In ffuflashpack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47028

In ffuflashpack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47028

CVE-2024-47028 affects Google Pixel devices, tied to the ffu.c implementation: the function ffu_flash_pack may overflow an integer, causing an out-of-bounds read. This could enable local information disclosure with system privileges required; exploitation is reported to require no user interactio...

UBUNTU-CVE-2023-39593

Insecure permissions in the sysexec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed...

CVE-2024-39440

In DRM service, there is a possible system crash due to null pointer dereference. This could lead to local denial of service with System execution privileges needed...

CVE-2024-39437

In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2024-39439

In DRM service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2024-39438

In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2024-39436

In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2024-39440

CVE-2024-39440 affects the DRM service and is caused by a null pointer dereference that can crash the system, leading to local denial of service with SYSTEM privileges required. Public references consistently describe the issue as a local DoS in DRM service components; no exploitation details are...

CVE-2024-39440

In DRM service, there is a possible system crash due to null pointer dereference. This could lead to local denial of service with System execution privileges needed...

CVE-2024-39439

The CVE-2024-39439 entry affects the DRM service and is caused by a missing bounds check that enables an out-of-bounds write. Reported impact is local denial of service with System execution privileges required; no exploitation details are provided in the connected documents. Affected software ve...